Approved changes feed: RSS · Atom

cpe:2.3:a:eaton:xcomfort_ethernet_communication_interface:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEaton (b7450635-db8f-5426-bd84-6f4be38222d9)
ProductXcomfort Ethernet Communication Interface (49f8efa3-7e82-5571-8730-a9e6d836e80c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59886 vulnerable 2026-06-03 15:06:26.233631 Details available
HIGH (8.8)
Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker with network access to the device executing privileged user commands. As cybersecurity standards continue to evolve and to meet our requirements today, Eaton has decided to discontinue the product. Upon retirement or end of support, there will be no new security updates, non-security updates, or paid assisted support options, or online technical content updates.
Published: 2025-12-23T11:31:31.339Z
Updated: 2025-12-23T14:43:39.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9368 vulnerable 2026-06-03 14:36:16.451848 Details available
An issue was discovered in Eaton xComfort Ethernet Communication Interface (ECI) Versions 1.07 and prior. By accessing a specific uniform resource locator (URL) on the webserver, a malicious user may be able to access files without authenticating.
Published: 2017-03-14T09:02:00.000Z
Updated: 2024-08-06T02:50:37.641Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.